Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/3138352e3132312e342e302f32322d3232203d3e203432363839.roa
File: 3138352e3132312e342e302f32322d3232203d3e203432363839.roa (raw, json)
Hash identifier: RlPRyvzbY5iAzFJ+kn3BxE+hpf0oKNc2UKzFHSualfQ=
Subject key identifier: A0:F3:A4:D7:E5:67:AB:0A:0F:DB:76:3C:0B:47:9B:0B:C4:15:9F:71
Certificate issuer: /CN=735d93706cbf4688ce7d60fc0ed693d4cc4a9326
Certificate serial: 34AEC56550C304BF948DE64320912FDA77938BBC
Authority key identifier: 73:5D:93:70:6C:BF:46:88:CE:7D:60:FC:0E:D6:93:D4:CC:4A:93:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c12TcGy_RojOfWD8DtaT1MxKkyY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/3138352e3132312e342e302f32322d3232203d3e203432363839.roa
Signing time: Thu 14 Mar 2024 09:36:26 +0000
ROA not before: Thu 14 Mar 2024 09:31:26 +0000
ROA not after: Thu 13 Mar 2025 09:36:26 +0000
asID: 42689
IP address blocks: 185.121.4.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 08 Aug 2024 10:24:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:ae:c5:65:50:c3:04:bf:94:8d:e6:43:20:91:2f:da:77:93:8b:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=735d93706cbf4688ce7d60fc0ed693d4cc4a9326
Validity
Not Before: Mar 14 09:31:26 2024 GMT
Not After : Mar 13 09:36:26 2025 GMT
Subject: CN=A0F3A4D7E567AB0A0FDB763C0B479B0BC4159F71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:46:54:a4:9f:34:91:e9:c5:79:d2:c0:21:c3:
e8:15:a0:b6:3f:b0:29:4f:75:82:0c:ec:67:0e:a1:
a5:b0:ac:99:6b:7e:1b:d9:e2:7d:de:44:b9:a8:25:
6e:92:c1:78:75:99:dd:69:b2:f1:ac:f2:16:d8:25:
16:75:99:de:b5:1d:13:17:e5:32:eb:d1:84:47:55:
4b:8e:65:1c:69:0d:32:57:49:93:3e:27:fe:06:2f:
53:61:fb:f1:a9:57:78:6f:f2:ce:5d:aa:e0:db:55:
0e:82:39:25:82:80:9f:2e:60:02:27:f8:d5:7e:72:
d0:de:15:3b:2e:3f:db:07:4c:78:ef:1d:2d:83:98:
c3:28:4e:b4:76:db:ed:f5:d6:60:ea:45:89:83:67:
30:16:fa:3f:33:cd:a3:60:33:6d:52:b1:4f:24:8e:
a0:c4:34:57:6b:2f:5e:f7:4b:69:e8:eb:5e:75:ea:
3c:b7:70:e8:72:e3:be:14:95:ee:9b:8d:8e:5f:33:
82:7a:f8:00:9b:d7:df:03:a9:bb:c3:0e:20:cb:b9:
95:3b:ff:f1:ee:05:ed:44:f5:be:10:09:d1:98:d0:
2d:87:4a:3f:3c:8d:dd:59:3b:24:f3:a3:85:fd:c6:
15:c9:8a:b3:a0:f6:21:4c:b7:a5:f5:33:57:14:4c:
60:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:F3:A4:D7:E5:67:AB:0A:0F:DB:76:3C:0B:47:9B:0B:C4:15:9F:71
X509v3 Authority Key Identifier:
keyid:73:5D:93:70:6C:BF:46:88:CE:7D:60:FC:0E:D6:93:D4:CC:4A:93:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/735D93706CBF4688CE7D60FC0ED693D4CC4A9326.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c12TcGy_RojOfWD8DtaT1MxKkyY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/3138352e3132312e342e302f32322d3232203d3e203432363839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.4.0/22
Signature Algorithm: sha256WithRSAEncryption
71:ca:f3:d0:cc:16:11:35:fe:1b:55:f0:3b:51:1f:c3:35:5e:
7f:29:c2:26:e2:49:26:ef:ba:56:8a:cd:4c:4e:d4:17:36:09:
bb:f6:4c:70:1f:67:9b:ed:6d:19:50:2d:63:80:a3:c8:da:7b:
ab:90:17:0e:3f:df:1a:4b:dc:c4:2c:f2:5d:83:6b:97:58:2b:
db:0c:53:61:6a:e3:95:cb:f9:8f:81:14:04:69:81:ee:72:ff:
e8:54:9e:4d:2b:22:30:65:37:e8:44:56:eb:0e:2a:c3:9d:4a:
3e:4d:6f:77:42:1a:c5:ca:7d:4e:91:a9:61:89:05:20:60:78:
c2:cc:93:3c:10:c3:80:25:33:af:c5:d0:d0:b7:a8:3e:d0:83:
a4:fb:c0:4c:73:35:15:c8:ad:ed:c5:e5:90:2c:de:62:dd:39:
f1:26:0c:dd:39:22:b1:ee:d3:e6:b5:cf:a9:75:15:81:b3:21:
4d:66:e1:be:21:ef:26:ef:b9:a5:b0:86:5b:58:64:b0:52:76:
82:8e:c6:6d:d5:c9:ac:2e:00:8e:76:af:5a:57:e3:85:e2:bb:
0d:1a:52:49:52:39:ad:70:13:07:da:f0:07:5b:6c:63:7a:ad:
8b:9a:18:ca:5c:9c:16:f4:fb:f9:9b:30:b1:b7:33:8e:30:bd:
65:d0:7d:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 8 12:52:51 2024 by rpki-client on console-ams.rpki-client.org